github iv-org/invidious v2.20260626.0

3 hours ago

v2.20260626.0

Wrap-up

This release hardens playlists, channels, and search, adds a privacy option for searches, and modernizes the packaging and CI pipeline.

Searches can now be submitted via POST so queries do not leak into server logs or browser history, Invidious cookies work across alternative domains, and "Watch on YouTube" / embed redirects use the correct timestamp and host. Playlist and channel parsing issues got fixed: outdated playlist parsing that hid all videos, paid course videos breaking imports, RSS feeds exposing private playlists without auth, broken author verification badges, and channel videos/playlists not loading from search. Thumbnail paths /pl_c / /tvfilm_banner are now supported, YouTube comments that were written in Japanese, Chinese, Korean and probably other languages do not longer swallows the last character when an emoji is present in the comment, and the search filters dropped the deprecated "sort by rating/date" options.

Packaging moves Docker builds to the 84codes Crystal compiler image, updates OpenSSL to 3.6.2 and Crystal to 1.20.x in OCI, bumps Alpine to 3.24, and unifies the ARM64 and AMD64 Dockerfiles. Developers benefit from continued encapsulation of constants/helpers/translation/video-parser logic into dedicated modules, an api/v1/channels.cr lint pass, trailing-whitespace cleanup, and a sweep of dependency and GitHub Actions bumps.

New features & important changes

For Users

  • Searches can be submitted through POST requests so queries stay out of URLs, server logs and browser history (#5551)
  • Invidious cookies are honoured across alternative configured domains (#5647)
  • Embed and "Watch on YouTube" redirects use the correct t/start parameter and the www.youtube.com host consistently (#5660, #5768)
  • The referrerpolicy/noreferrer handling was corrected now that YouTube requires referrers on embeds (#5642)
  • The listen button on the title updates its elapsed time, and the deprecated "sort by rating/date" search filter options were removed (#5625, #5629)

For instance owners

  • Docker builds switched to the 84codes Crystal compiler container image, and OCI images were updated to Crystal 1.20.x with OpenSSL 3.6.2 (#5473, #5692)
  • Alpine was bumped to 3.24 in the Docker image (#5778)
  • ARM64 and AMD64 Dockerfiles were unified into a single workflow (#5700)

For developers

  • Constants and functions were encapsulated into dedicated I18n, Helpers, Invidious::Videos::Parser and Invidious::Videos::Clip modules (#5637, #5639, #5745)
  • api/v1/channels.cr received a lint pass and trailing whitespaces were removed from the codebase (#5693, #5634)
  • CI bumped the Crystal version matrix and displayed compile progress/stats, and the crystal-lang/install-crystal action was updated (#5691, #5696, #5703, #5686)

Bugs fixed

User-side

  • Playlists showed no videos because of outdated playlist parsing; this is fixed along with paid course videos breaking the importer (#5774, #5207)
  • Private Invidious playlists were reachable through RSS feeds without authentication (#5776)
  • Channel videos and playlists failed to load from search, and channel author verification was broken (#5736, #5751)
  • A missing collectionThumbnailViewModel hash key crashed channel browsing (#5725)
  • The quality=medium query parameter was appended to videos about to premiere (#5755)
  • YouTube/Invidious links did not rewind their timestamp when playback position was rewound (#5601)
  • The last character of a comment was lost when the comment contained emoji (#5587)
  • Playlist RSS watch URLs only joined params with & when params were present, and thumbnail paths /pl_c and /tvfilm_banner are now supported (#5646, #5742)

For instance owners

  • Docker/OCI builds keep current with Crystal 1.20.1, OpenSSL 3.6.2, Alpine 3.24 and the unified multi-arch Dockerfile (#5703, #5701, #5778, #5700)

For developers

  • Dependency and GitHub Actions bumps kept CI current: docker/login-action, build-push-action, metadata-action, setup-buildx-action, int128/docker-manifest-create-action and crystal-lang/install-crystal (#5705, #5766, #5721, #5686, #5661, #5662, #5663, #5664)

Full list of pull requests merged since the last release (newest first)

  • fix: fix playlists not showing any videos due to outdated playlist parsing (#5774, by @Fijxu)
  • chore(deps): bump alpine from 3.23 to 3.24 in /docker (#5778, by @dependabot[bot])
  • fix: fix private invidious playlists on rss feeds from being fetched without authentication (#5776, by @Fijxu)
  • Use "www.youtube.com" consistently (#5768, by @janmoesen)
  • chore(deps): bump int128/docker-manifest-create-action from 2.21.0 to 2.22.0 (#5766, by @dependabot[bot])
  • Add support for alternative domains for Invidious cookies (#5647, by @Fijxu)
  • Only include '&' if params are present in watch urls for playlist RSS (#5646, by @Fijxu)
  • Dockerfile: Switch to 84codes crystal compiler container image (#5473, by @Fijxu)
  • fix: Do not append query params quality=medium to videos that are about to premiere (#5755, by @Fijxu)
  • Fix Youtube and Invidious links not rewinding their time when video playback position is rewound (#5601, by @Fijxu)
  • feat: Add support for POST requests on searches for privacy (#5551, by @Fijxu)
  • Fix last character disappearance if emoji are in comment (#5587, by @shiny-comic)
  • Encapsulate videos parser and clip functions inside it's own Invidious::Videos::Parser and Invidious::Videos::Clip module (#5745, by @Fijxu)
  • fix: fix author verification in channels (#5751, by @Fijxu)
  • Add support for /pl_c and /tvfilm_banner paths (thumbnails used in some playlists) (#5742, by @Fijxu)
  • fix: fix channel videos and playlists on searches (#5736, by @Fijxu)
  • fix: fix Missing hash key: "collectionThumbnailViewModel" (#5725, by @Fijxu)
  • chore(deps): bump int128/docker-manifest-create-action from 2.20.0 to 2.21.0 (#5721, by @dependabot[bot])
  • chore: update openssl to 3.6.2 in OCI (#5701, by @Fijxu)
  • Bump int128/docker-manifest-create-action from 2.19.0 to 2.20.0 (#5705, by @dependabot[bot])
  • CI: Unify ARM64 and AMD64 Dockerfiles (#5700, by @Fijxu)
  • CI: update Crystal 1.20.0 to 1.20.1 in ci.yml matrix (#5703, by @Fijxu)
  • CI: display progress and stats when compiling Invidious in ci.yml matrix (#5696, by @Fijxu)
  • CI: Bump Crystal version matrix (#5691, by @Fijxu)
  • chore: update Crystal to 1.20.0 in OCI (#5692, by @Fijxu)
  • player: Use correct time parameter for YouTube embed redirects (#5660, by @radmorecameron)
  • chore: lint api/v1/channels.cr (#5693, by @Fijxu)
  • Encapsulate helpers constants and functions inside it's own Helpers module (#5639, by @Fijxu)
  • Encapsulate translation constants and functions inside it's own I18n module (#5637, by @Fijxu)
  • Bump crystal-lang/install-crystal from 1.9.1 to 1.9.2 (#5686, by @dependabot[bot])
  • Playlists: fix parsing error when some videos are paid for in a course (#5207, by @ChunkyProgrammer)
  • Bump docker/login-action from 3 to 4 (#5661, by @dependabot[bot])
  • Bump docker/build-push-action from 6 to 7 (#5662, by @dependabot[bot])
  • Bump docker/metadata-action from 5 to 6 (#5663, by @dependabot[bot])
  • Bump docker/setup-buildx-action from 3 to 4 (#5664, by @dependabot[bot])
  • Remove noreferrer since youtube now requires referrers on embeds (#5642, by @ashleyirispuppy143)
  • Remove trailing whitespaces from codebase (#5634, by @Fijxu)
  • Add title listen button time updates (#5625, by @JeroenBoersma)
  • Remove sort by rating and date in video search filters (#5629, by @Fijxu)

Don't miss a new invidious release

NewReleases is sending notifications on new releases.